The version of OpenSSL reported by phpinfo() on our servers (5.3.28, Windows Fast-cgi) is actually below the versions mentioned in the recent security bulletin that is getting all the attention. The bulletin I read said the problem specifically affected only those two versions, so are we good or do we need to update? Andrew -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php